Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KEkckqwSKt3dSJx2GPPpeOIJWvY.roa
File: KEkckqwSKt3dSJx2GPPpeOIJWvY.roa (raw, json)
Hash identifier: uHbi0v+J1+/0M8RK5M6Zj+LpH5fDS/lJPUtiNFRH7f4=
Subject key identifier: 28:49:1C:92:AC:12:2A:DD:DD:48:9C:76:18:F3:E9:78:E2:09:5A:F6
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282817485605503F7B8CFD607FCA925F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KEkckqwSKt3dSJx2GPPpeOIJWvY.roa
Signing time: Thu 02 Jan 2025 17:55:03 +0000
ROA not before: Thu 02 Jan 2025 17:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43944
IP address blocks: 217.79.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:17:48:56:05:50:3f:7b:8c:fd:60:7f:ca:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28491c92ac122adddd489c7618f3e978e2095af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:56:c7:10:97:90:63:bf:12:1b:c3:b0:6e:
f4:fa:42:78:12:e1:12:a1:0c:a3:c7:9d:8d:54:cc:
07:71:24:2c:9d:2a:8b:d5:6a:4f:27:c9:57:d4:8a:
09:a3:18:3e:10:c5:fb:0b:a6:af:bc:d2:9a:d6:4c:
b1:c5:95:06:1a:b9:03:5d:5d:93:82:41:33:6c:93:
d8:77:e9:cd:f3:26:dd:c3:02:36:0c:6f:ac:16:5e:
51:e1:11:6e:29:fb:7b:76:8b:56:87:4e:e1:2d:9f:
1b:40:04:a8:b7:38:80:8e:7f:fe:bc:32:80:22:97:
2b:0a:3b:a6:64:1f:0b:e4:ce:43:b2:a0:33:44:2d:
18:77:2b:4d:8b:5c:5e:83:73:6e:4a:9a:bd:86:50:
9f:39:17:00:78:38:1b:ba:e5:bb:d7:e1:62:a8:79:
fb:a5:c9:04:07:00:88:ae:80:52:d4:38:06:7f:62:
2b:93:8e:58:cf:49:07:84:16:83:e2:05:85:09:f9:
3b:6f:54:76:23:32:63:55:28:97:f3:d2:08:cb:d9:
34:5c:47:27:f9:83:81:ef:48:88:22:87:16:86:ee:
fd:16:8d:47:d1:54:3e:32:72:3f:a1:6e:66:b6:91:
de:ce:2e:0a:5e:7f:7b:c6:29:3f:92:e2:49:70:77:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:1C:92:AC:12:2A:DD:DD:48:9C:76:18:F3:E9:78:E2:09:5A:F6
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KEkckqwSKt3dSJx2GPPpeOIJWvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.40.0/24
Signature Algorithm: sha256WithRSAEncryption
15:44:49:a9:68:e9:37:a0:f2:99:54:7d:e7:09:4e:47:ef:29:
c9:1e:46:38:e4:17:cc:6a:c6:4c:49:12:b9:5f:b6:38:28:10:
77:ea:35:13:4b:9c:0d:74:ae:0b:d1:78:fb:4f:0c:25:7e:ba:
f9:8a:4a:16:1c:65:fd:a1:e8:1a:f3:01:ab:5e:aa:ad:55:62:
e9:c6:39:1b:40:be:f2:de:d9:f7:3c:b6:d3:9d:a5:3b:f0:fa:
4f:82:62:2b:2b:4a:55:84:5d:b8:26:e3:d1:67:23:5d:02:ac:
a1:86:80:ac:e0:5b:e9:f0:12:3d:bc:98:db:03:ab:fa:13:2b:
aa:17:cd:90:26:24:98:3f:c7:8a:95:e8:5d:a8:f9:99:a7:83:
b7:0f:a2:0a:93:01:25:5f:9d:73:34:6f:10:37:a1:f7:95:09:
79:c4:7e:9a:74:51:0c:ff:a1:63:92:c2:94:e9:1d:f1:72:2e:
8f:b5:47:85:28:1a:8b:6c:78:35:53:d1:3b:b3:88:7c:4e:80:
b0:67:e9:bd:37:1c:13:4d:b3:20:88:90:00:c3:4d:36:d5:98:
55:f9:30:22:1b:3c:04:69:83:33:46:1f:7e:f8:d4:77:c8:79:
6d:ef:cc:fa:e2:c0:33:4b:fe:99:f7:0d:47:17:17:ae:14:46:
86:83:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:44 2025 by rpki-client